This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
File:                     FMxtyeCRBW52oT-Pinw1duzx27E.mft (raw, json)
Hash identifier:          MnHxO0ZJLP21q1HBunTgk3+teW3qeFjqRmMcrG4uZ50=
Subject key identifier:   86:55:2B:E5:C4:51:C2:9E:A1:B7:4F:75:A1:8A:3A:54:8A:6E:07:60
Authority key identifier: 14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1
Certificate issuer:       /CN=A91C9D04/serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
Certificate serial:       163E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
Manifest number:          1FB0
Signing time:             Thu 18 Dec 2025 16:36:41 +0000
Manifest this update:     Thu 18 Dec 2025 16:36:40 +0000
Manifest next update:     Thu 25 Dec 2025 16:36:40 +0000
Files and hashes:         1: FMxtyeCRBW52oT-Pinw1duzx27E.crl (hash: 4PrLV2iXrDhi4eBJxiR4x2eExbefnjT/6NS+ZacQyYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 16:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5694 (0x163e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D04, serialNumber=14CC6DC9E091056E76A13F8F8A7C3576ECF1DBB1
        Validity
            Not Before: Dec 18 16:36:40 2025 GMT
            Not After : Dec 25 16:36:40 2025 GMT
        Subject: CN=69442d99-471c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:ba:07:95:a4:de:f7:d6:e1:7b:ef:84:1c:
                    73:fc:af:9a:8b:5f:f7:40:17:fb:5c:70:61:2f:ba:
                    c1:34:1a:f7:55:0e:f7:e2:87:9d:64:de:7b:1c:76:
                    7d:66:ff:49:c4:dc:96:d9:c8:e9:db:b9:d5:25:61:
                    46:2d:f4:73:28:44:60:0c:5f:06:9c:cd:71:e8:63:
                    c8:64:ad:cc:4f:d6:0f:95:83:aa:0c:19:37:b5:4a:
                    53:3d:4b:5a:52:42:cd:ba:90:74:47:b5:19:83:83:
                    36:bc:fe:b9:c1:d2:81:2b:53:f8:ae:04:a0:03:1a:
                    be:c9:09:62:21:49:2b:19:53:3a:e9:cf:38:54:ac:
                    0d:01:2f:b8:99:5c:69:3b:e4:45:42:6a:52:34:99:
                    a8:4f:74:4c:0b:33:c9:c2:90:11:5d:6c:ad:37:b4:
                    ad:9c:07:88:38:7a:e9:8f:97:ec:b3:c8:bd:9f:56:
                    8e:30:c7:e1:b4:d6:a3:56:9a:c8:7c:52:d6:bb:96:
                    d9:0c:2a:0c:7f:7d:ee:ca:b1:4e:55:e8:76:92:e5:
                    86:aa:2d:99:3e:8f:38:13:ea:e7:99:6e:9b:c1:55:
                    b2:26:94:c0:5c:34:31:74:70:64:6b:3a:8b:6a:69:
                    f1:f5:c9:e5:e1:f1:ca:7d:22:b8:e2:ee:92:75:0e:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:55:2B:E5:C4:51:C2:9E:A1:B7:4F:75:A1:8A:3A:54:8A:6E:07:60
            X509v3 Authority Key Identifier:
                keyid:14:CC:6D:C9:E0:91:05:6E:76:A1:3F:8F:8A:7C:35:76:EC:F1:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMxtyeCRBW52oT-Pinw1duzx27E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/FMxtyeCRBW52oT-Pinw1duzx27E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f4:9b:da:a8:a4:5b:70:66:fe:cf:ca:b8:a2:f0:86:41:80:a0:
         80:d5:0e:eb:58:ff:a4:65:b1:cb:6e:14:26:de:d6:f4:d4:37:
         67:77:8d:a7:51:e9:3e:7b:40:02:c0:e3:a1:03:87:a7:21:01:
         96:a9:49:ed:99:98:1a:49:23:4d:41:bc:72:a2:f4:d7:e3:74:
         36:50:10:47:88:f8:bd:7a:e0:0a:d4:b9:a1:4c:a7:92:ee:eb:
         f8:da:ba:08:a3:f9:b7:20:29:41:ec:ff:f2:09:86:21:30:cf:
         68:ab:e7:b4:75:8a:31:0e:fc:07:ed:90:b4:4a:34:ba:62:72:
         af:55:07:a9:ca:c7:89:45:20:fe:d6:f4:5c:03:ae:78:70:cf:
         d7:24:8a:fb:44:05:a5:78:61:a7:54:b5:c3:0f:5e:4f:5f:ce:
         4e:eb:ed:a6:6d:f8:da:fe:06:cc:0d:19:e9:25:a4:81:59:de:
         9f:f4:c8:68:7e:2f:1f:7b:0e:88:d9:99:64:dc:e5:cf:c6:6e:
         3c:e9:06:8f:ac:3e:8b:b5:ad:b0:ac:45:25:db:1e:f5:92:f8:
         a6:26:bb:a2:03:7f:53:f3:7f:12:3b:35:47:35:69:c0:14:ec:
         a1:e1:33:6d:78:f7:65:20:bb:91:be:80:98:71:d4:c0:29:9d:
         9f:16:ba:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlEMDQxMTAvBgNVBAUTKDE0Q0M2REM5RTA5MTA1NkU3NkExM0Y4RjhBN0MzNTc2
RUNGMURCQjEwHhcNMjUxMjE4MTYzNjQwWhcNMjUxMjI1MTYzNjQwWjAYMRYwFAYD
VQQDDA02OTQ0MmQ5OS00NzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn8O6B5Wk3vfW4XvvhBxz/K+ai1/3QBf7XHBhL7rBNBr3VQ734oedZN57HHZ9
Zv9JxNyW2cjp27nVJWFGLfRzKERgDF8GnM1x6GPIZK3MT9YPlYOqDBk3tUpTPUta
UkLNupB0R7UZg4M2vP65wdKBK1P4rgSgAxq+yQliIUkrGVM66c84VKwNAS+4mVxp
O+RFQmpSNJmoT3RMCzPJwpARXWytN7StnAeIOHrpj5fss8i9n1aOMMfhtNajVprI
fFLWu5bZDCoMf33uyrFOVeh2kuWGqi2ZPo84E+rnmW6bwVWyJpTAXDQxdHBkazqL
amnx9cnl4fHKfSK44u6SdQ75TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZVK+XE
UcKeobdPdaGKOlSKbgdgMB8GA1UdIwQYMBaAFBTMbcngkQVudqE/j4p8NXbs8dux
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz
NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9GTXh0eWVDUkJXNTJvVC1QaW53MWR1engy
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZNeHR5ZUNSQlc1Mm9ULVBpbncxZHV6eDI3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9GTXh0eWVDUkJX
NTJvVC1QaW53MWR1engyN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQD0m9qopFtwZv7Pyrii8IZBgKCA1Q7rWP+kZbHLbhQm3tb01Ddnd42n
Uek+e0ACwOOhA4enIQGWqUntmZgaSSNNQbxyovTX43Q2UBBHiPi9euAK1LmhTKeS
7uv42roIo/m3IClB7P/yCYYhMM9oq+e0dYoxDvwH7ZC0SjS6YnKvVQepyseJRSD+
1vRcA654cM/XJIr7RAWleGGnVLXDD15PX85O6+2mbfja/gbMDRnpJaSBWd6f9Mho
fi8few6I2Zlk3OXPxm486QaPrD6Lta2wrEUl2x71kvimJruiA39T838SOzVHNWnA
FOyh4TNtePdlILuRvoCYcdTAKZ2fFrp7
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:34 2025 by rpki-client